StepSecurity Logo
StepSecurity
LoginStart free

Assess the risk of third-party GitHub Actions

Actions

Assess all the actions

posthog/duckdb/.github/actions/trim-ccache

posthog/duckdb/.github/actions/trim-ccache

DuckDB is an analytical in-process SQL database management system

6/10
greut/eclint-action

greut/eclint-action

GitHub Action running the EditorConfig linter

3/10
nx1x/cloudflare-warp-action/fill

nx1x/cloudflare-warp-action/fill

Headless Cloudflare WARP enrollment for GitHub Actions runners. Full network access via your Zero Trust org.

6/10
davidb/rust-cargo-make

davidb/rust-cargo-make

๐Ÿ› ๏ธ GitHub Action to install `cargo-make` command

0/10
step-integration-tests/auto-pdpr-test-38233-3/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-38233-3/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
elastic/apm-aws-lambda/.github/actions/bootstrap

elastic/apm-aws-lambda/.github/actions/bootstrap

A repository for the AWS Lambda extension and other lambda related tools and build scripts.

5/10
contrast-security-oss/contrast-sca-action

contrast-security-oss/contrast-sca-action

Contrast SCA GitHub Action

5/10
step-integration-tests/auto-pdpr-test-71008-1/.github/workflows/install-and-build

step-integration-tests/auto-pdpr-test-71008-1/.github/workflows/install-and-build

Test repository created from policy-based-prs template for integration testing

2/10
fish-shop/indent-check

fish-shop/indent-check

A GitHub action for checking indentation in fish shell files.

8/10
sonarsource/sonar-java-symbolic-execution/.actions/image

sonarsource/sonar-java-symbolic-execution/.actions/image

Sonar Java symbolic execution plugin

6/10
step-security/workflow-conclusion-action/__builder_checkout_dir__/.github/actions/compute-sha256

step-security/workflow-conclusion-action/__builder_checkout_dir__/.github/actions/compute-sha256

GitHub action to get workflow conclusion. Secure drop-in replacement for technote-space/workflow-conclusion-action.

8/10
nvidia/nemoclaw/.github/actions/setup-native-podman-e2e

nvidia/nemoclaw/.github/actions/setup-native-podman-e2e

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

6/10
esmf-org/install-esmf-action

esmf-org/install-esmf-action

Install ESMF libraries, modules, and binaries on GitHub Runner

2/10
imaralabs-ai/coder/.github/actions/setup-embedded-pg-cache-paths

imaralabs-ai/coder/.github/actions/setup-embedded-pg-cache-paths

Secure environments for developers and their agents

4/10
rafidhaque/fake-mali-action

rafidhaque/fake-mali-action

2/10
step-security/super-linter/image

step-security/super-linter/image

Combination of multiple linters to run as a GitHub Action or standalone. Secure drop-in replacement for super-linter/super-linter.

8/10
devantler-tech/ksail/.github/actions/cleanup-hetzner

devantler-tech/ksail/.github/actions/cleanup-hetzner

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

3/10
Maintained action available
sonarsource/gh-action_release/maven-central-sync

sonarsource/gh-action_release/maven-central-sync

6/10
caffeelake/airbyte/.github/actions/public-layout.tsx

caffeelake/airbyte/.github/actions/public-layout.tsx

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

2/10
Maintained action available
immich-app/devtools/actions/create-workflow-token

immich-app/devtools/actions/create-workflow-token

Various tooling used by the Immich maintainer team

7/10